Cisco Secure Firewall 1200 Series Data Sheet

Enterprise Security Appliances

Data Sheet

Available Languages

Download Options

  • PDF
    (1.1 MB)
    View with Adobe Reader on a variety of devices
Updated:July 9, 2025

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

Available Languages

Download Options

  • PDF
    (1.1 MB)
    View with Adobe Reader on a variety of devices
Updated:July 9, 2025

Table of Contents

 

 

Product overview

The Cisco Secure Firewall 1200 Series is a family of security appliances that serves to connect and protect the distributed enterprise. It extends Cisco’s enterprise security policy and threat inspection to users and devices in branch offices and smaller sites.

Powered by an efficient network processor, 1200 Series delivers high levels of security policy and threat defense without compromising user experience.

Table 1.       1200 Series Models Summary

Model

Form factor

Firewall Throughput

Threat Defense

IPS

TLS

Interfaces

1210CE

Desktop/ Compact

6.5 Gbps

6.0 Gbps

6.0 Gbps

1.0 Gbps

8x 1000BASE-T Gigabit Ethernet (10/100/1000 Mbps)

1210CP

Desktop/ Compact

6.5 Gbps

6.0 Gbps

6.0 Gbps

1.0 Gbps

8x 1000BASE-T Gigabit Ethernet (10/100/1000 Mbps)

4 ports with PoE delivering up to 120W

1220CX

Desktop/ Compact

9.0 Gbps

9.0 Gbps

9.0 Gbps

1.5 Gbps

8x 1000BASE-T Gigabit Ethernet (10/100/1000 Mbps)

2x SFP+ 1/10Gbps Ethernet

1230

1U

13 Gbps

9.0 Gbps

13 Gbps

2.5 Gbps

8x 1000BASE-T Gigabit Ethernet

4x SFP+ 1/10Gbps Ethernet

1240

1U

18 Gbps

12 Gbps

18 Gbps

3.2 Gbps

8x 1000BASE-T Gigabit Ethernet

4x SFP+ 1/10Gbps Ethernet

1250

1U

24 Gbps

18 Gbps

22 Gbps

4.1 Gbps

8x 2.5GBASE-T Multigigabit Ethernet

4x SFP+ 1/10Gbps Ethernet

Cisco Secure Firewall 1210CE

Figure 1.   

Cisco Secure Firewall 1210CE

Cisco Secure Firewall 1210CP

Figure 2.   

Cisco Secure Firewall 1210CP

Cisco Secure Firewall 1220CX

Figure 3.   

Cisco Secure Firewall 1220CX

Secure Firewall 1230, 1240, 1250

Figure 4.   

Secure Firewall 1230, 1240, 1250

Feature highlights

1200 Series firewalls are available with Cisco Adaptive Security Appliance (ASA) or Cisco Secure Firewall Threat Defense (FTD) software. For full details on the features supported in these applications, please refer to the software release documentation.

Table 2.       1200 Series with Threat Defense Software Features

Features

Details

Trust and Integrity

Built with Cisco Trustworthy Technologies to provide a hardware root of trust, cryptographically signed and validated software image support, anti-tamper and anti-counterfeit

High Availability (HA)

Support for active/standby HA pairs

Multi-Instance

Not supported

Network security management

Centralized management via Cisco Secure Firewall Management Center (FMC)

On-box management via Cisco Secure Firewall Device Manager (FDM)

Cloud-managed via Cisco Security Cloud Control (SCC), formerly CDO - Cisco Defense Orchestrator

Table 3.       1200 Series Hardware Features – Compact Models

Features

Details

Form factor

Compact appliance for desktop use. Can be rack-mounted or wall-mounted via optional accessories.

Console port

USB Type-C and RJ-45 (Cisco serial)

Management Ethernet

1000BASE-T port

USB port

USB 3 Type A port

Storage

Integrated SSD, 480GB

Power supply

Single input, external power supply

Cooling

Integrated blower, side exhaust

Power over Ethernet
(1210CP model only)

4 of the 1000BASE-T ports support IEEE 802.3at for delivery of up to 30W per port (120W total) to compatible PD endpoints

SFP+ transceiver slots
(1220CX model only)

Support for a wide range of 1Gbps and 10Gbps transceivers. For a full list, refer to the product hardware documentation and Cisco’s transceiver compatibility matrix tools.

Table 4.       1200 Series Hardware Features – 1U Models

Features

Details

Form factor

1U rack mount appliance

Console port

USB Type-C and RJ-45 (Cisco serial)

Management Ethernet

1000BASE-T port

USB port

USB 3 Type A port

Storage

Field-replaceable SSD, 960GB

Power supply

Single integrated power supply

Cooling

Integrated blower, front to back (port-side intake)

SFP+ transceiver slots

Support for a wide range of 1Gbps and 10Gbps transceivers. For a full list, refer to the product hardware documentation and Cisco’s transceiver compatibility matrix tools.

Table 5.       1200 Series interfaces

Feature

1210CE

1210CP

1220CX

1230

1240

1250

Integrated interfaces

8x 1000BASE-T

8x 1000BASE-T

8x 1000BASE-T

8x 1000BASE-T

8x 1000BASE-T

8x 2.5GBASE-T

Transceiver slots

-

-

2x SFP+

4x SFP+

4x SFP+

4x SFP+

Power over Ethernet

-

4 ports, 120W total

-

-

-

-

Performance

1200 Series firewalls are powered by an advanced processor that accelerates security and networking functions.

Note:       Performance will vary depending on features activated, network traffic protocol mix, and packet size characteristics. Performance is subject to change with new software releases. Consult your Cisco representative for detailed sizing guidance.

Table 6.       Performance - 1200 Series with Threat Defense software

Metric

1210

1220

1230

1240

1250

Throughput: FW + AVC (1024B)

6.0 Gbps

9.0 Gbps

13 Gbps

18 Gbps

24 Gbps

Throughput: Next-Generation Intrusion Prevention System (NGIPS) (1024B)

6.0 Gbps

9.0 Gbps

11 Gbps

15 Gbps

22 Gbps

Throughput: FW + AVC + IPS (1024B)

6.0 Gbps

9.0 Gbps

9.0 Gbps

12 Gbps

18 Gbps

IPSec VPN Throughput
(1024B TCP w/Fastpath)

5.0 Gbps

10 Gbps

13 Gbps

18 Gbps

22 Gbps

TLS decryption[1]

1.0 Gbps

1.5 Gbps

2.5 Gbps

3.2 Gbps

4.1 Gbps

Maximum new connections per second, with AVC

35K

50K

50K

70K

100K

Table 7.       Performance - 1200 Series with ASA software

Metric

1210

1220

1230

1240

1250

Stateful inspection firewall throughput[2]

6.5 Gbps

15 Gbps

18 Gbps

20 Gbps

20 Gbps

Stateful inspection firewall throughput (multiprotocol)[3]

6.0 Gbps

12 Gbps

15 Gbps

20 Gbps

20 Gbps

IPsec VPN throughput
(450B UDP L2L test)

5.5 Gbps

12 Gbps

15 Gbps

18 Gbps

24 Gbps

New connections per second

175K

250K

350K

450K

550K

Note:       Performance will vary depending on features activated, network traffic protocol mix, and packet size characteristics. Performance is subject to change with new software releases. Consult your Cisco representative for detailed sizing guidance.

Scalability

1200 Series appliances are designed for deployment in branch offices and smaller sites.

Table 8.       Scalability - 1200 Series with Threat Defense software

Measure

1210

1220

1230

1240

1250

Maximum concurrent sessions, with AVC

200K

300K

400K

600K

1M

Maximum VPN Peers

200

300

500

1,000

1,500

Maximum virtual router instances (VRF)

5

10

10

10

15

Table 9.       Scalability - 1200 Series with ASA software

Measure

1210

1220

1230

1240

1250

Concurrent firewall connections

200K

300K

400K

600K

1M

Maximum VPN Peers

200

300

500

1,000

1,500

Hardware specifications

Table 10.          1200 Series hardware specifications – compact models

Specification

1210CE

1210CP

1220CX

Chassis Dimensions (HxWxD)
Excluding rubber feet

1.11” x 10.8” x 6.8”
2.82 x 27.43 x 17.22 cm

Weight

3.04 lb (1.38 kg)

3.17 lb (1.44 kg)

3.09 lb (1.40 kg)

Operating range

Temperature: operating

32 to 104°F (0 to 40°C)[4]

Humidity: operating

5 to 85% (noncondensing)

Altitude: operating

0 to 10,000 ft (3048 m)

Acoustic noise

23.5 dBA @ 80.6°F(27°C)

42.7 dBA @ maximum fan speed

Non-operating/storage environment

Temperature: nonoperating

-13 to 158°F (-25 to 70°C)

Humidity: nonoperating

5 to 95% (noncondensing)

Altitude: nonoperating

0 to 15,000 ft (4570 m)

Power supply

AC input voltage

100-240V AC

AC input frequency

50–60 Hz

AC current draw, maximum

0.4A (100V)

0.17A (240V)

Power consumption, typical

32W

Power consumption, maximum

40W

40W (excluding PoE)

165W (including PoE)

40W

Table 11.          1200 Series hardware specifications – 1U models

Specification

1230

1240

1250

Chassis Dimensions (HxWxD)

1.72 x 11.22 x 17.25 inches
4.37 x 28.49 x 43.81 cm

Weight

9.35 lb (4.24 kg)

9.35 lb (4.24 kg)

9.52 lb (4.32 kg)

Operating range

Temperature: operating

32 to 104°F (0 to 40°C)

Humidity: operating

5 to 85% noncondensing

Altitude: operating

0 to 10,000 ft (0 to 3048 m)

Acoustic noise (maximum)

52.1 dBA

57.8 dBA

57.8 dBA

Non-operating/storage environment

Temperature: nonoperating

-13 to 158°F (-25 to 70°C)

Humidity: nonoperating

5 to 95% noncondensing

Altitude: nonoperating

0 to 15,000 ft (0 to 4572 m)

Power supply

AC input voltage

100 to 240V AC

AC input frequency

50 to 60 Hz

AC current draw, maximum

0.88A (100V)

0.37A (240V)

Power consumption, typical

 

 

 

Power consumption, maximum

57W

69W

88W

Compliance

For details on product regulatory compliance in a specific market, consult the Cisco Product Approvals tool.

Table 12.          1200 Series Regulatory and Standards Compliance

Specification

Description

Regulatory compliance

Products comply with CE markings per directives 2004/108/EC and 2006/108/EC

Safety

  UL 60950-1
  CAN/CSA-C22.2 No. 60950-1
  UL 62368-1
  CAN/CSA-C22.2 No. 62368-1
  EN 62368-1
  IEC 62368-1 with all country deviations
  AS/NZS 62368-1

EMC: Emissions

  47CFR Part 15 (CFR 47) Class A (FCC Class A)
  AS/NZS CISPR22 Class A
  CISPR22 Class A
  EN55022 Class A
  ICES003 Class A
  VCCI Class A
  EN61000-3-2
  EN61000-3-3
  KN22 Class A
  CNS13438 Class A
  EN300386
  TCVN7189

EMC: Immunity

  EN55024
  CISPR24
  EN300386
  KN24
  TVCN 7317
  EN-61000-4-2, EN-61000-4-3, EN-61000-4-4, EN-61000-4-5, EN-61000-4-6, EN-61000-4-8, EN61000-4-11

Ordering information

1200 Series hardware appliances and accessories are listed below. For information on licenses, subscriptions and other options associated with the product, refer to the Network Security Ordering Guide.

Table 13.          1200 Series Firewall Appliances

Product ID

Description

CSF1210CE-ASA-K9

Secure Firewall 1210 compact security appliance with ASA software

CSF1210CE-TD-K9

Secure Firewall 1210 compact security appliance with Threat Defense software

CSF1210CP-ASA-K9

Secure Firewall 1210 compact security appliance with PoE, ASA software

CSF1210CP-TD-K9

Secure Firewall 1210 compact security appliance with PoE, Threat Defense software

CSF1220CX-ASA-K9

Secure Firewall 1220 compact security appliance with ASA software

CSF1220CX-TD-K9

Secure Firewall 1220 compact security appliance with Threat Defense software

CSF1230-ASA-K9

Secure Firewall 1230 security appliance with ASA software

CSF1230-TD-K9

Secure Firewall 1230 security appliance with Threat Defense software

CSF12400-ASA-K9

Secure Firewall 1240 security appliance with ASA software

CSF1240-TD-K9

Secure Firewall 1240 security appliance with Threat Defense software

CSF1250-ASA-K9

Secure Firewall 1250 security appliance with ASA software

CSF1250-TD-K9

Secure Firewall 1250 security appliance with Threat Defense software

Table 14.          1200 Series Accessories

Product ID

Description

CSF1200C-PWR-AC

Secure Firewall 1200 Series Compact power supply (without PoE)

CSF1200CP-PWR-AC

Secure Firewall 1200 Series Compact power supply (with PoE)

CSF1200C-RACK-MNT=

Secure Firewall 1200 Series Compact appliance rack-mount kit (compact models)

CSF1200C-WALL-MNT=

Secure Firewall 1200 Series Compact appliance wall-mount kit (compact models)

CAB-CONS-USB-C=

Console cable, USB-C to USB-C, 6ft, compatible with 1200 Series firewalls

CSF1200-SSD960=

Secure Firewall 1200 Series SSD, 960GB (1U models)

Cisco Capital

Flexible payment solutions to help you achieve your objectives

Cisco Capital makes it easier to get the right technology to achieve your objectives, enable business transformation and help you stay competitive. We can help you reduce the total cost of ownership, conserve capital, and accelerate growth. In more than 100 countries, our flexible payment solutions can help you acquire hardware, software, services and complementary third-party equipment in easy, predictable payments. Learn more.

Document history

Update

Date

Initial release, compact models (1210CE, 1210CP, 1220CX)

September 2024

Added 1U models (1230, 1240, 1250)

March 2025

 



[1] Throughput measured with 50% TLS 1.2 traffic with AES256-SHA with RSA 2048B keys.
[2] Throughput measured with 1500B User Datagram Protocol (UDP) traffic measured under ideal test conditions.
[3] “Multiprotocol” refers to a traffic profile consisting primarily of TCP-based protocols and applications such as HTTP, SMTP, FTP, IMAPv4, BitTorrent, and DNS.
[4] Derate the maximum operating temperature 2.7° F (1.5° C) per 1000 ft (304 m) above 6,000 ft (1829 m) altitude.

Our experts recommend

Learn more